diff --git a/talos/talconfig.yaml b/talos/talconfig.yaml
index d1620e3..5f0e823 100644
--- a/talos/talconfig.yaml
+++ b/talos/talconfig.yaml
@@ -14,6 +14,13 @@ additionalApiServerCertSans:
 additionalMachineCertSans:
   - ${clusterEndpointIP}
 
+imageFactory:
+  registryURL: factory.hsn.dev
+  schematicEndpoint: /schematics
+  protocol: https
+  installerURLTmpl: "{{.RegistryURL}}/installer/{{.ID}}:{{.Version}}"
+  ISOURLTmpl: "{{.Protocol}}://{{.RegistryURL}}/image/{{.ID}}/{{.Version}}/{{.Mode}}-{{.Arch}}.iso"
+
 nodes:
   # cloud CAX21 Arm64
   - hostname: arlen
@@ -63,22 +70,19 @@ nodes:
           - network: 10.2.0.0/16
             gateway: 10.2.0.1 # The route's gateway (if empty, creates link scope route).
             metric: 2048
-  # Bare-metal AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
+  # VM AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
   - hostname: nienna
     disableSearchDomain: true
     ipAddress: ${niennaIP}
     controlPlane: false
-    # customization:
-    #   extraKernelArgs:
-    #     - net.ifnames=0
-    #   systemExtensions:
-    #     officialExtensions:
-    #       - siderolabs/amd-ucode
-    #       - siderolabs/qemu-guest-agent
-    talosImageURL: harbor.hsn.dev/factory.talos.dev/installer/696bb48d9c48e567596f393a4ff9bfd26d4dda5d92c16beb580e96fa68d6324c
-    # https://factory.talos.dev/image/696bb48d9c48e567596f393a4ff9bfd26d4dda5d92c16beb580e96fa68d6324c/v1.5.5/metal-amd64.iso
-    # no guest agent in the raw.xz image
-    # https://factory.talos.dev/image/6c789e7a3eec37617fd9d239a7f696ba48e75bc4780f5cb30bf8882686d79a22/v1.5.5/metal-amd64.raw.xz
+    schematic:
+      customization:
+        extraKernelArgs:
+          - net.ifnames=0
+        systemExtensions:
+          officialExtensions:
+            - siderolabs/amd-ucode
+            - siderolabs/qemu-guest-agent
     installDiskSelector:
       busPath: /pci0000:00/0000:00:0a.0/virtio2/
     networkInterfaces:
@@ -96,21 +100,50 @@ nodes:
               - network: 10.2.0.0/16
                 gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
                 metric: 2048
+  # VM AX41-Nvme - AMD Ryzen 5 3600 6-Core Processor (Zen2) - 64GB ECC RAM
+  - hostname: nessa
+    disableSearchDomain: true
+    ipAddress: ${nessaIP}
+    controlPlane: false
+    schematic:
+      customization:
+        extraKernelArgs:
+          - net.ifnames=0
+        systemExtensions:
+          officialExtensions:
+            - siderolabs/amd-ucode
+            - siderolabs/qemu-guest-agent
+    installDiskSelector:
+      busPath: /pci0000:00/0000:00:0a.0/virtio2/
+    networkInterfaces:
+      - interface: eth0
+        dhcp: true
+      - interface: eth1
+        dhcp: false
+        vlans:
+          - vlanId: 4010
+            mtu: 1400
+            addresses:
+              - 10.2.1.4/24
+            dhcp: false
+            routes:
+              - network: 10.2.0.0/16
+                gateway: 10.2.1.1 # The route's gateway (if empty, creates link scope route).
+                metric: 2048
   # VM on EX44 - Intel Gen 13 (Raptor Lake) - 64GB RAM
   - hostname: orome
     disableSearchDomain: true
     ipAddress: ${oromeIP}
     controlPlane: false
-    # customization:
-    #     extraKernelArgs:
-    #         - net.ifnames=0
-    #     systemExtensions:
-    #         officialExtensions:
-    #             - siderolabs/i915-ucode
-    #             - siderolabs/intel-ucode
-    #             - siderolabs/qemu-guest-agent
-    talosImageURL: harbor.hsn.dev/factory.talos.dev/installer/f2f665587318c2d79e7b315cc333fff276ed59c8de831f16e28b4db107496ac2
-    # https://factory.talos.dev/image/f2f665587318c2d79e7b315cc333fff276ed59c8de831f16e28b4db107496ac2/metal-amd64.iso
+    schematic:
+      customization:
+        extraKernelArgs:
+          - net.ifnames=0
+        systemExtensions:
+          officialExtensions:
+            - siderolabs/i915-ucode
+            - siderolabs/intel-ucode
+            - siderolabs/qemu-guest-agent
     installDiskSelector:
       busPath: /pci0000:00/0000:00:0a.0/virtio2/
     networkInterfaces: